WordPress plugin can be exploited to run PHP commands on the server by posting a comment that contains a malicious payload.

A critical vulnerability in the PHP programming language can be trivially exploited to execute malicious code on Windows devices, security researchers warned as they urged those affected to take ...